babywyrm Goto Github PK

awesome-nodejs-pentest

:skull_and_crossbones: Delightful Node.js packages useful for penetration testing, exploiting, reverse engineer, cryptography ...

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

awesome-systools

Awesome Systools is a collection of sysadmins daily handy tools.

aws-s3-virusscan

Antivirus for Amazon S3

aws-spring-boot-optimization

aws-tools-for-powershell

The AWS Tools for PowerShell lets developers and administrators manage their AWS services from the PowerShell scripting environment.

aws-well-architected-labs

Hands on labs and code to help you learn, measure, and build using architectural best practices.

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

badpods

A collection of manifests that will create pods with elevated privileges.

bane

this is a python module that contains functions and classes which are used to test the security of web/network applications. it's coded on pure python and it's a very intelligent tool ! It can easily detect: XSS (reflected/stored), RCE (Remote Code/Command Execution), SSTI, SSRF, CORS Misconfigurations, File Upload, CSRF, Path Traversal... and more

bashfuscator

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

beef

The Browser Exploitation Framework Project

betterbackdoor

A backdoor with a multitude of features.

black-hat-rust

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

blindsqli

A python based blind SQL injection exploitation script

blobrunner

Quickly debug shellcode extracted during malware analysis

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

bloodhound.py

A Python based ingestor for BloodHound

blue-team-notes

You didn't think I'd go and leave the blue team out, right?

blueteam-tools

Tools and Techniques for Blue Team / Incident Response

bruteloops

Protocol agnostic online password guessing API.

bruteshark

Network Analysis Tool

bug-bounty-roadmaps

Bug Bounty Roadmaps

burp_bug_finder

Automatic Bug finder with buprsuite

burpa

Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).

burpfeed

Hacked together script for feeding urls into Burp's Sitemap

bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

cacti-rce-cve-2022-46169-vulnerable-application

WARNING: This is a vulnerable application to test the exploit for the Cacti command injection (CVE-2022-46169). Run it at your own risk!